Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
File: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json)
Hash identifier: 92PcX75SnmJlaYbaSafnFwtSPbtcliTDP3jPQYtvH3k=
Subject key identifier: 37:A8:85:CF:88:6E:A3:2F:08:15:29:D5:69:CF:CD:12:F2:12:82:5A
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 0199FB45C25C5F95E635AD0646FA1A423EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
Manifest number: 0CA9
Signing time: Sun 19 Oct 2025 07:01:16 +0000
Manifest this update: Sun 19 Oct 2025 07:01:16 +0000
Manifest next update: Mon 20 Oct 2025 07:01:16 +0000
Files and hashes: 1: 3P59Feb1jpoB_hwUGftROdmja6Q.roa (hash: vgAncWwhtK3WJUrN8441tfi4l7WNzadgnCcv6cDRfOQ=)
2: 8pYmn7TAGaMCMkGbuhyzK9IB1Gw.roa (hash: MiQ9nf6ClXhcte8AL3HSxhfAjgaZoJoXSOwTUDNQ6GU=)
3: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: iOPG5R/YIaBTk8S5dj/ywH3EbCY/mFihouwfuRvGMM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c2:5c:5f:95:e6:35:ad:06:46:fa:1a:42:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Oct 19 07:01:16 2025 GMT
Not After : Oct 20 07:01:16 2025 GMT
Subject: CN=37a885cf886ea32f081529d569cfcd12f212825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:71:d7:0d:40:41:63:dd:ec:55:94:69:11:
af:d9:41:00:c0:e5:62:bd:93:b3:e2:34:15:b5:7c:
cc:3d:39:46:d8:14:f1:22:e6:86:8c:bc:de:f5:61:
b6:91:a4:0c:9c:44:99:d5:e3:5f:0f:70:41:f1:2c:
37:c3:68:1a:5e:fd:01:a0:bd:93:82:9d:dc:53:15:
31:38:cb:44:6f:d7:59:ce:f6:14:bd:1d:50:5c:cb:
4b:be:b4:47:4c:39:0e:37:ec:af:c0:bf:17:e4:3f:
06:c7:d5:4f:1c:72:d1:72:d5:a0:84:61:a2:03:8f:
6a:a8:74:1e:93:2c:82:c1:a1:3d:8b:fa:de:c8:19:
cd:ca:b8:60:be:74:8a:08:74:a2:d2:24:55:a2:9b:
33:7e:45:25:45:c5:dd:fd:5f:b4:87:ae:48:63:16:
6b:07:40:0a:41:1c:c5:f4:5d:7a:bb:65:d6:09:8a:
92:54:0b:2f:2a:f2:d3:8b:29:68:bb:0e:c7:4e:6f:
f9:e4:e1:9a:8d:43:82:69:ef:de:30:aa:52:3c:d2:
33:86:f3:aa:d8:45:1e:4b:8d:5c:7e:c2:40:27:1c:
9a:2c:f8:ee:7f:08:d3:38:b8:31:33:96:2a:01:d9:
96:58:d8:a5:20:e9:c2:aa:f1:e7:0d:02:ba:ab:4c:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A8:85:CF:88:6E:A3:2F:08:15:29:D5:69:CF:CD:12:F2:12:82:5A
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c1:58:d5:f5:74:34:60:b1:3e:a4:50:12:2c:53:3f:da:ab:
c5:0f:aa:b3:ef:56:cf:e0:4d:6a:47:96:fb:d6:ad:ed:47:12:
6a:15:71:17:ee:14:db:86:0b:bf:a6:20:8f:53:de:9a:7b:b9:
de:89:a1:0a:41:51:ce:05:00:76:bc:7a:cd:62:86:ff:68:4c:
a8:36:d2:8b:b8:54:6f:90:16:be:b5:1a:3d:9b:ae:0f:d6:f4:
af:7c:f0:ee:44:ce:6f:96:48:98:c7:67:ca:94:71:22:fe:28:
87:47:0c:97:d6:0c:67:a3:d4:f2:b0:b4:bb:a6:99:1e:68:b4:
dd:aa:0f:b3:84:c5:4a:3e:9b:61:f0:4f:64:18:e0:88:a6:16:
82:8f:b0:08:e3:7c:11:3e:2e:0d:a6:c2:f7:d8:0a:1e:fc:7b:
df:b0:68:8d:24:28:3f:26:24:77:ba:56:bc:00:03:fe:53:7f:
52:42:b5:bf:6d:bc:fd:a3:f9:11:f9:8b:1b:85:e5:0e:f6:61:
ae:d7:f7:74:cd:9c:5a:be:05:ba:9f:05:dd:3f:b5:9f:e9:80:
e8:fb:24:51:60:6b:6e:b5:64:85:ad:bf:5d:5e:20:ac:45:a6:
24:59:cb:d8:3b:f4:89:54:cf:c2:1c:1b:91:98:a4:33:db:6d:
02:62:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:45 2025 by rpki-client